---

1. Scope and Distinction Between Controller & Processor Roles

1.1 Mindset Studios as a Data Controller: We act as a data controller with respect to account registration details, transaction records, customer billing addresses, administrative communications, and direct website visitor tracking on turnkeydashboards.com.

1.2 Mindset Studios as a Data Processor (Customer Data): In delivering the Services, we ingest, process, summarize, and display data originating from your third-party analytics, search, and audit accounts (including Google Analytics 4, Google Search Console, Google Lighthouse, and WooRank). With respect to this Customer Data, you remain the data controller. We process Customer Data strictly under your direction, as an authorized processor, to generate dashboards and intelligence briefs.

1.3 Customer Obligations: This Privacy Policy does not replace or relieve you of your own legal privacy obligations regarding tracking scripts, analytics tags, cookie banners, and consent management tools operating on your website.

2. Categories of Information We Collect

2.1 Information You Provide Directly:

• Identity and Contact Data: Full name, company trade name, job title, email address, telephone number, and physical billing address.
• Account & Onboarding Data: Usernames, authorized website domain URLs, WordPress environment specifications, selected subscription tiers, and reporting preferences.
• Transaction Records: Billing postal codes, transaction dates, invoices, and payment status. Full payment card numbers and security codes (CVVs) are tokenized and processed directly by our third-party payment gateways (e.g., Stripe, PayPal) and are never stored on our servers.
• Operational Communications: Support inquiries, onboarding questionnaires, consultation notes, and feedback submissions.

2.2 Information Ingested via Authorized Integrations:

• Analytics & Engagement: Sessions, active users, engagement duration, pageviews, event counts, conversion funnels, and geographic aggregates retrieved via Google Analytics 4 API access.
• Search Performance: Clicks, impressions, average position rankings, and search query terms retrieved via Google Search Console API access.
• Technical Health & Audits: Lighthouse scores, Core Web Vitals, page speed indicators, and technical SEO audit crawl data retrieved via WooRank or automated crawlers.
• E-Commerce Metrics (Performance Plan): Aggregated transaction values, item counts, SKU-level velocity, and checkout funnel conversion percentages.

2.3 Information Collected Automatically:

• Technical Device Data: Internet Protocol (IP) address, browser type and version, operating system, language settings, referring URLs, access timestamps, and session diagnostics gathered when browsing turnkeydashboards.com or accessing customer portals.

3. How We Use Collected Information

We process personal and operational data strictly for lawful, legitimate commercial purposes, including:

• Service Delivery & Intelligence Generation: Provisioning customer accounts, authenticating WordPress shortcode embed licenses, generating interactive dashboards, executing True Web Intelligence analyses, and delivering intelligence summaries.
• Transaction & Subscription Fulfillment: Processing initial setup orders, handling recurring monthly/annual subscription billing, calculating statutory sales taxes, and delivering itemized receipts via WooCommerce.
• License Governance & Security: Verifying that shortcode embeds run exclusively on authorized customer domains, detecting unauthorized credential sharing, mitigating cyber threats, and deploying the paywall overlay if an account becomes delinquent.
• Support & Communications: Transmitting essential service updates, renewal reminders, security alerts, and technical troubleshooting notices.
• Legal & Regulatory Compliance: Maintaining financial tax archives, complying with court subpoenas, enforcing our legal terms, and defending against commercial claims.

4. Zero Resale, Commercial Privacy, and AI Model Protections

4.1 Zero Commercial Resale: Mindset Studios does not sell, rent, lease, or trade personal data or Customer Data to data brokers, advertising aggregators, or third parties for monetary or commercial consideration.

4.2 No Targeted Advertising Sharing: Customer Data pulled from your connected GA4 or Search Console accounts is never shared with third-party ad networks or used for behavioral ad retargeting.

4.3 Strict AI Model Training Guardrails: We do NOT ingest, submit, or feed identifiable Customer Data, private query lists, or proprietary traffic figures into generalized public artificial intelligence models (such as open-source LLMs) for the benefit of unrelated third parties. Any AI-assisted summarization performed by Turnkey Dashboards is processed within isolated, secure enterprise processing pipelines.

5. How We Share and Disclose Information

We disclose personal data and system records only to trusted service partners under strict confidentiality agreements:

• Core Infrastructure Providers: Cloud hosting facilities, managed database clusters, transactional email delivery tools, and payment gateways (WooCommerce, Stripe, PayPal) operating under contract.
• Authorized Third-Party APIs: Google Cloud Platform APIs and WooRank data connectors accessed strictly to fetch data streams authorized by the client.
• Professional Advisors: Licensed legal counsel, certified public accountants, auditors, and insurers retained by Mindset Studios or Bullock Enterprises.
• Statutory & Law Enforcement Mandates: Judicial authorities, regulators, or law enforcement bodies when strictly compelled by valid subpoenas, court orders, or applicable law.
• Corporate Transactions: Successor entities or acquiring organizations in the event of a merger, corporate restructuring, asset sale, or acquisition of Mindset Studios.

6. Data Retention Protocols

6.1 Transaction & Corporate Records: Maintained for the duration of your active customer relationship and retained for a minimum of seven (7) years following subscription termination to fulfill statutory tax, accounting, and legal requirements.

6.2 Cached Analytics & Dashboard Snapshots: Aggregated reporting metrics, historical snapshots, and temporary cache tables are maintained during the active life of your subscription to power multi-period trend reporting. Upon permanent cancellation and account closure, client-specific cached tables are purged from active production servers within ninety (90) days, subject to routine encrypted backup cycles.

7. Data Security and Safeguards

Mindset Studios deploys comprehensive technical and operational safeguards designed to prevent unauthorized access, data loss, or disclosure:

• Transport Layer Security (TLS): All communications across our marketing pages, client portals, and embed pipelines are encrypted using TLS 1.3 encryption.
• Least Privilege Governance: Administrative access to client API tokens, credentials, and database schemas is strictly limited to authorized technical personnel.
• Defensive Architecture: Continuous vulnerability monitoring, Web Application Firewalls (WAF), and automated intrusion prevention systems protect our infrastructure.

Security Disclaimer: While we employ commercially rigorous safeguards, no digital system or internet transmission is 100% immune to breach. You are responsible for safeguarding your portal passwords and API credentials.

8. Your Statutory Privacy Rights

Depending on your geographic jurisdiction and the applicability of regional data protection laws, you may possess the following rights:

• Right of Access & Portability: The right to confirm whether we process your personal data and obtain a portable copy of your account data.
• Right to Rectification: The right to request the correction of inaccurate or incomplete personal information.
• Right to Deletion: The right to request the erasure of personal information, subject to statutory tax and accounting retention requirements.
• Right to Opt-Out: The right to opt out of the sale of personal data or targeted behavioral advertising (which Turnkey Dashboards does not engage in).

Jurisdictional Disclosures:

Virginia Consumer Data Protection Act (VCDPA): Virginia consumers have specific rights to access, delete, obtain a portable copy of their personal data, and appeal decisions regarding privacy requests.

California (CCPA / CPRA): California residents may request specific disclosures regarding categories of personal information collected and exercise rights without fear of unlawful commercial discrimination.

Submitting a Request: To exercise any privacy right, email support@turnkeydashboards.com with the subject line “Data Privacy Request.” We verify requests by matching authorized account email credentials before fulfilling any data action.

9. Children’s Online Privacy

Turnkey Dashboards is an enterprise B2B software and digital intelligence platform intended exclusively for commercial business operators and professionals. We do not knowingly market to, collect, or solicit personal data from children under eighteen (18) years of age. If we learn that personal data of a minor has been collected, it will be deleted immediately.

10. Third-Party Links and Integrated Platforms

Our website and client dashboards may contain links or API connections to external platforms (including Google, WordPress, WooRank, or payment gateways). Mindset Studios does not operate or control these independent platforms. Their data collection and privacy practices are governed entirely by their respective privacy policies. We encourage you to review their specific disclosures before linking accounts.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological adjustments, operational evolutions, or legal amendments. All updates will be published with a revised “Last Updated” date. Continued utilization of our Services following published updates constitutes acceptance of the modified Privacy Policy.

12. Privacy Contact & Legal Inquiries

Questions or formal requests regarding this Privacy Policy should be directed to:

Mindset Studios / Turnkey Dashboards

Attention: Data Protection Officer & Legal Affairs

Parent Entity: Bullock Enterprises

Jurisdiction: Commonwealth of Virginia, USA

Website: turnkeydashboards.com

Email: support@turnkeydashboards.com (Subject: Data Privacy Request)